dep: bump requests 2.26.0 → 2.31.0 (security) (#2575)

Co-authored-by: Nazim <nazim@openclaw.ai>
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

pyproject.toml

@@ -84,7 +84,7 @@ test = [
     "mock==4.0.2",
     "python-gitlab==2.10.1",
     # requirements for stuff in ./utils
-    "requests==2.26.0",
+    "requests==2.31.0",
 ]
 
 gendownloadpage = [

requirements.in

@@ -8,7 +8,7 @@ Flask-RESTful==0.3.10
 Flask-HTTPAuth==4.8.0
 hwi==2.4.0
 python-dotenv==0.21.1
-requests==2.26.0
+requests==2.31.0
 pysocks==1.7.1
 six==1.16.0
 stem==1.8.0

requirements.txt

@@ -730,9 +730,9 @@ pytz==2024.1 \
     #   flask-babel
     #   flask-restful
     #   pandas
-requests==2.26.0 \
-    --hash=sha256:6c1246513ecd5ecd4528a0906f910e8f0f9c6b8ec72030dc9fd154dc1a6efd24 \
-    --hash=sha256:b8aa58f8cf793ffd8782d3d8cb19e66ef36f7aba4353eec859e74678b01b07a7
+requests==2.31.0 \
+    --hash=sha256:942c5a758f98d790eaed1a29cb6eefc7ffb0d1cf7af05c3d2791656dbd6ad1e1 \
+    --hash=sha256:58cd2187c01e70e6e26505bca751777aa9f2ee0b7f4300988b709f44e013003f
     # via
     #   -r requirements.in
     #   cryptoadvance-spectrum

src/cryptoadvance/specter/services/extension_gen.py

@@ -232,8 +232,12 @@ class GithubUrlLoader(BaseLoader):
 
     def get_source(self, environment, template):
         url = self.url_for_template(template)
-        r = requests.get(url)
-        if r.status_code != 200:
+        for attempt in range(3):
+            r = requests.get(url)
+            if r.status_code == 200:
+                return r.text, url, None
+            if r.status_code == 429 and attempt < 2:
+                time.sleep(2 ** (attempt + 1))
+                continue
             raise TemplateNotFound(f"{url} results in {r.status_code}")
-        source = r.text
-        return source, url, None
+        raise TemplateNotFound(f"{url} results in {r.status_code}")